Entanglement verification for quantum key distribution systems with an underlying 

bipartite qubit-mode structure 



O 

o 

(N 

a 

o 

m 

> 

(N 
O 
O 

o 

Oh! 

> ' 

■ 



Johannes Rigas^, Otfried Giihne'^ and Norbert Liitkenhaus^ 
^ Quantum Information Theory Group, Institut fiir Theoretische Physik I, 
and Max-Planck Research Group, Institute of Optics, Information and Photonics, 
Universitdt Erlangen-Nurnberg, Staudtstrafie 7/B2, 91058 Erlangen, Germany 
^Institut fiir Quantenoptik und Quanteninformation, 
Osterreichische Akademie der Wissenschaften, A-6020 Innsbruck, Austria 
(Dated: February 1, 2008) 

We consider entanglement detection for quantum key distribution systems that use two signal 
states and continuous variable measurements. This problem can be formulated as a separability 
problem in a qubit-mode system. To verify entanglement, we introduce an object that combines the 
covariance matrix of the mode with the density matrix of the qubit. We derive necessary separability 
criteria for this scenario. These criteria can be readily evaluated using semidefinite programming 
and we apply them to the specific quantum key distribution protocol. 
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I. INTRODUCTION 

Quantum key distribution (QKD) protocols typically 
distinguish two phases: In the first phase, a physical ap- 
paratus is used to establish correlated data between the 
sender (called Alice) and the receiver (called Bob). This 
data are described by a joint probabihty distribution. In 
the second phase the data are processed by classical com- 
munication via an authenticated public channel employ- 
ing methods such as post-selection, error correction and 
privacy amplification to distill a secret key (for a review 
see [1] ). 

A necessary precondition for the success of Phase II, 
i.e., for obtaining a secret key, is that the correlations 
in the data show signatures from quantum entanglement 
[2] . This means that the data must originate from an ef- 
fective entangled state (effective, since the quantum state 
is not shared any more). Whenever only partial informa- 
tion on the whole bipartite state is available from the 
data, it means that all possible states compatible with 
the measurement outcomes must be entangled. If there 
is a separable state consistent with the data, then the 
QKD protocol is not secure. 

For this, it makes no conceptual difference whether 
the entangled state is first distributed by an untrusted 
third party Eve before Alice and Bob perform the mea- 
surements on the state (so-called entanglement-based 
schemes, EE, see e.g. [3]) or whether Alice prepares 
an entangled state first, measures her part before send- 
ing the other part through the insecure domain under 
Eve's control to Bob, who performs his measurements 
(so-called prepare&measure schemes, PM, see e.g. [4, 5]). 

The investigation of entanglement in QKD protocols 
using discrete variables, mainly qubits, was considered 
before for various protocols [2, 6]. For the case where 
Alice and Bob both control a continuous variable system, 
this issue has been addressed in Refs. [7, 8]. In this paper, 
we study this problem for the case where Alice owns a 
discrete system, namely a qubit, and Bob owns a mode. 
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FIG. f: (color online) In the considered QKD scheme Al- 
ice effectively sends two coherent states | ± a) to Bob, who 
performs heterodyne measurement, e.g. a projection onto co- 
herent states. Alice's state preparation can be thought of as 
coming from an initial entangled state, as described in the 
text. 



The protocol we investigate is described as follows (see 
Fig.l): Alice prepares the entangled state 



\^)ab = ^/^^\Q)A®\a)B + ^/p{\'^-) 



a)B 



(1) 



at her site. By projecting the state |^')(5'|ab either onto 
|0)(0|yi or onto |1)(1|a, Alice effectively sends coherent 
states I ± q;)b with a priori probabilities po,pi to Bob. 
The overlap of those input states is significantly larger 
than zero. Since Alice keeps her part of the state, her 
reduced density matrix 



PA :=Trs(|^)(*UB) = 



Pq 
a\ 



y/poPi{-a\a) 
Pi 



(2) 

is fixed. 

After passing through the insecure domain controlled 
by Eve, Bob receives these states which may have 
changed, in particular affected by loss and noise, and 
he measures the covariance matrix of them, for instance 
by performing heterodyne detection. The states Bob re- 
ceives conditioned on which state was sent by Alice are 
labeled with po and pi. After the measurements, the 
data are processed by classical communication in order 
to obtain a secret key. 
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This protocol is similar to the one proposed and im- 
plemented in [9] with the difference that in Ref. [9] also a 
strong phase reference, which is necessary for heterodyne 
detection as a local oscillator, has been sent from Alice to 
Bob. Since Eve may also access this phase reference, the 
security analysis for a practical setup is more complicated 
compared with the protocol described above. 

The structure of this paper is as follows: With a sim- 
plified example, in Section II we outline that the key 
idea behind our approach is that the outcome states mea- 
sured by Bob are very pure. In Section III, we introduce 
a description of qubit-modc systems which includes all 
information on the bipartite state accessible with hetero- 
dyne detection. We note some basic properties of this 
description and derive a necessary criterion for separa- 
bility. In Section IV these conditions are applied to the 
special case of limited knowledge on the whole state in a 
PM scheme. Finally, a sufficient entanglement criterion 
is implemented numerically where the performance of the 
criterion is discussed with help of an explicit example. 



II. BASIC IDEA BEHIND ENTANGLEMENT 
DETECTION 

Let us explain the main idea for our entanglement de- 
tection scheme in a simple example. To that aim we will 
show no separable state can be compatible with the data 
if both conditional states po,pi are pure. 

So let us assume that Bob receives two non-orthogonal, 
non-identical pure states, i.e., pi = i = 0,1, and 

<Tr(/9o/Oi) < 1- In this case, we can describe the whole 
bipartite state pab as 



PAB 



PoPo 


ct 1 


C 


PiPi_ 



(3) 



with the pure states pi completely known due to the to- 
mographical completeness of Bob's heterodyne measure- 
ment and two arbitrary matrices C, of which only the 
trace is known since Tr(C) = {pa)io = \/PoPi [o] — a)- 

The two pure states \^pi) span Bob's Hilbert space, so 
we can write down the matrix blocks in Eq.(3) in the 
eigenbasis of pq: 
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In this representation we can easily implement the con- 
straint that Pab is positive. Namely, this implies that 
|coi| = |cii| = 0, since the element {pab)22 on the diag- 
onal is zero [10]. 

Under the assumption of separability of Pab, also its 
partial transpose must be positive [11, 12]. Performing 
the partial transposition leads to the conclusion, that for 
PPT states also [cio] = has to hold. 



For separable states we have therefore in the eigenbasis 
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with S abbreviating Tr(C) = s/PoPi {a.\ — a) = 
V»e-2|«l'. 

Similar arguments apply if we consider the eigenbasis 
of pi which is related to the eigenbasis of po by a luiitary 
matrix U . The transformed matrix (1^ (g) U)pab(,^a ® 
U^) must be of a form similar to (4). Then, by compari- 
son of the off-diagonal blocks one obtains the equality 
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which implies that U is diagonal in the chosen basis with 
some complex entries on the diagonal of modulus one. 
From this it follows that \ifi) = e'^^\Lpo), A G R, which 
was excluded in the beginning. So we have derived a 
contradiction to the assumption of separability simply 
by making use of the purity of the states measured at B 
and the knowledge of the reduced density matrix pA- 

In the following, we will extend this idea to the case of 
outcome states which are affected by noise [29]. To this 
aim, we first need an adequate and powerful description 
of quantum states of a qubit and a mode. In the next 
Section we will introduce the so-called expectation value 
matrix for this task. Then, we will formulate separabil- 
ity criteria in this description. With these criteria, we 
can then investigate the presence of entanglement in the 
actual QKD protocol. 



III. CLASSIFICATION OF THE EXPECTATION 
VALUE MATRIX 

In our protocol, the density matrix has a special struc- 
ture. While Alice has a discrete system, Bob's system 
consists of a continuous variable system, namely a mode. 

On the one hand, there exist efficient operational en- 
tanglement criteria for bipartite discrete systems consid- 
ering the system's density matrix [11-15]. On the other 
hand, criteria for bipartite CV systems exploiting uncer- 
tainty relations [16] and covariance matrices [17-19] of 
quadrature operators measured on the whole state are 
known. 

One might be tempted to employ these CV entangle- 
ment criteria for our half-discrete, half-continuous prob- 
lem (e.g. by describing Alice's discrete subsystem in 
terms of two Fock states with different photon numbers). 
However, it has been shown in Ref. [20] that these criteria 
can not be successfully applied here, due to the limited 
knowledge on the whole bipartite state in our PM scheme. 

Therefore, we introduce in this section a quantity that 
describes the two different systems in their standard ways 
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and includes all properties accessible in a PM scheme us- 
ing heterodyne detection. Additionally, the basic prop- 
erties of this object are derived. 



A. Definition 

We introduce the bipartite expectation value matrix 
(EVM) X e C''^^ 



as 



|0)(0|OB\ {\0){1\(S>B' 

|i)(o|0B) (|i)(i|(g)B; 



(7) 



with B being the operator- valued matrix 



B :-- 



1 



X 
J2 



y 

S{xy) 



y S{xy) y^ 



(8) 



In this definition, x and y denote the quadrature oper- 
ators, obeying the commutation relations [x, y] = xy — 
yx = i. Furthermore, S{xy) denotes the symmetrized 
product {xy + yx)/2 and {A(^B) = Tr{pA® B) denotes 
the matrix of expectation values of the tensor product of 
A with all operators of i? in a given state pab- 

We take Alice's natural basis {|0),|1)} so that along 
with the identity on Bob's side, the elements of the re- 
duced density matrix pA arc included (sec next section). 
The two projectors |0)(0| and |1)(1| ensure that condi- 
tional quadrature expectation values and moments easily 
accessible to Bob arc involved. 

Explicitly, with the definitions (7) and (8) and the spe- 
cific form of pAB (3), the upper left 3 x 3-block in (7) 
becomes 



|0)(0|®B)=Po 



1 (a;)o (j/)o 
(a;)o (a;2)o {S{xy))o 
{y)o {S{xy))o {y\ 



=-PoVo, 



(9) 



with the expectation value (6)o := Tr(6po), defining ijo 
as the single m,ode's EVM of the state pq. Obviously, r/o 
is real and symmetric by construction. 



B. Properties 

We now want to derive properties of the EVM 770 of 
po- For this, let us first look at the covariance matrix 70 
of a single mode, defined as 



70 := 



A(a;)o A(5(xy))o' 
A{S{xy))o A{y)o 



(10) 



with A(,x)o = (x2)o - {x)l and A{S{xy))o = (5(,x?y))o - 
{x)o{y)o etc. For such a matrix, it is known that a neces- 
sary and sufficient criterion of being a covariance matrix 
of a physical state is 



7o + - J > with J 



-1 

1 



(11) 



This condition is an implementation of the canonical 
commutation relations and the resulting uncertainty re- 
lations obeyed by x and y [21, 22]. Note that complex 
conjugation of Eq. (11) yields Jo — > 0, hence 70 > 
has to hold, too. 

Now we will show that for rjo a condition similar to 
Eq. (11) holds, namely 



Vo + ^j) > with J := 




0-1 
10 



Indeed, using the commutation relations [x, y] 
can see that 



(1)0 (.t)o {y)o 
{x)q (.t2)o {yx)o 

{y}o {xy)o (2/^)0 



(12) 



I one 



(13) 



which is clearly positive since any term s^(?7o + iJ/'2)s 
with s = {31,82,83)^ can be expressed as {A'^A) with 
A = si+ S2X + szy. 

Obviously, the positivity condition (12) does not de- 
pend on a particular measurement on Alice's side but 
must hold for any projector \s){s\ evaluated by A, i.e., for 
any ps := Tv a{p ab\s) {s\ (Xi 1), the corresponding EVM 
r]s must fulfill {r]s + i J/2) > 0. 

Furthermore, from Eqs. (7) and (8) it is obvious that 
for i,i = 1,4, the sub-matrix is exactly the reduced 
density matrix pA-, since on Bob's side, only the identity 
is evaluated. By construction, we have also X = ■ So 
we can summarize: 

Observation 1 For any bipartite state p, its EVM %(p) 
(as defined in Eq.(7)) has the following properties: 

• X is Hermitean: X = X^- 

• for i,j = 1,4, the sub-matrix [x]ij is the reduced 
density matrix pA (and thus, positive, Hermitean 
and of unit trace) 

• for any projector \s){s\, the EVM rjs := 
Tr^ {(|s)(s| (8) ls)x} of the corresponding mode 
must satisfy 



(14) 



This condition implies {r]s 
as well. 



i J/2) >Oandr]s>0 



C. Sepetrability conditions 

Now we want to derive necessary conditions for sep- 
arability in terms of the EVM. We will start with pure 
product states. 
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For a pure product state p = \s){s\ Ps, the bipartite 
EVM x{p) is of the form \s){s\ (^r]s- Since the projector 
\s){s\ is positive, by virtue of Eq.(14) x must then fulfill 



X± [\s){s\®^Jj = \s){s\^(^r]s±ljj >0. (15) 

For a general separable state, which can be written as 

P = EkPkPt'^Pk^ the EVM x{p) = EkPkPk'^Vk must 
hence satisfy 



X± ( ^PA(E)J] >0. 



(16) 



The second relation holds due to Eq. (15) and the fact 
that J2kPkPk ~ PA- We can summarize: 

Observation 2 For any separable state p, its EVM x 
additionally to the conditions specified in Observation 1 
must satisfy the following inequalities: 



X± -paO J> 0. 
Note that this inequality implies x > 0, as well. 



(17) 



IV. APPLICATION TO A GENERAL PM 
SCHEME 

Let us now connect these necessary conditions on the 
EVM of a bipartite separable state p to the knowledge 
on that state accessible in any PM scheme with two sig- 
nal states and heterodyne detection. Given the available 
entries of the EVM we derive a set of matrix inequalities 
which have to be fulfilled. The question whether they can 
be fulfilled can then be solved efficiently by semidefinite 
programming. 



A. Knowledge on x ™ PM schemes 

Let us first determine the entries in the EVM which are 

accessible in any PM scheme. For \s)a = \0)a or |1)a, 
r]a corresponds to Bob's measurement outcomes under 
the condition that A sent signal or 1. Bob has the full 
information on these states pQ and pi, i.e., all expectation 
values in rjo and 771 are fully known. With knowledge of 
the a priori probabilities po, pi this gives full information 
on Xij for i,j = 1, 2, 3 or i,j = 4, 5, 6, i.e. for the upper 
left and lower right 3 x 3-block of x (cf. Eq.(7)). 

For i=l,2,3,j = 4,5,6 and vice versa, the only oper- 
ator product of |0)(l|(8)i3 in Eq.(7) that can be evaluated 
is |0)(1| 1 (or |1)(0| (g) 1, respectively; cf. Eq.(8)) be- 
cause they are known from the reduced density matrix of 
Alice. 

It is important to note at this point that since 

dim(J^) = 2, we can (and will) always choose pA to be 
real and thus have pA = Pa by a proper phase choice of 



|0) and |1). Obviously, this property holds for arbitrary 
signal states sent to Bob. 

The remaining 16 entries Xij (for i = 1, 2, 3 , j = 4, 5, 6 
and vice versa with {i,j} 7^ {1, 4}) arc unknown but can 
be further restricted by the conditions in Observation 1 
to five free complex parameters. 

The explicit form of x then becomes 



PoVo 

S a* b* 
a* c* d* 
b* d* e* 



S a b 
a c d 
b d e 

pm 



(18) 



with S abbreviating {pa)oi and a, b,c,d,e G (D being free 
complex parameters. From Observation 1, we have the 
following general result holding for all protocols with two 
signal states and heterodyne detection: 

Observation 3 Let PajVo o-nd r]i be specified by a cer- 
tain set of measurement data in an arbitrary PM scheme 
with two signal states and heterodyne detection. If no set 
of parameters a, b,c,d,e € (D can be found such that x as 
specified in Eq.(18) satisfies the inequalities (17), then 
the measured bipartite state p must have been entangled. 
Consequently, if such a set of parameters can be found, 
then the QKD protocol is insecure. 

It is possible to show that one can concentrate on real 

parameters a, 6, c, d, e, only: 

Lemma 1 Suppose X = x is a solution of the form (18) 
to a problem specified by data 770 , ??i , Pa ■ Then there exists 
always a real solution X e R^^^. 

Proof: Let us first show that is also a solution. 
Since tjq = rjo and r]f = r]i, X'^ still fits to the exper- 
imental parameters. Furthermore, since we have chosen 
Pa = Pa I ffic new X^ obeys still the inequalities (17), 
since = - J. But then X := {X + X'^)/2 is another 
solution, which is real. □ 

Finally we show that with all knowledge available in 
a PM scheme, PPT entangled states cannot be distin- 
guished from separable states: 

Lemma 2 Suppose a PPT-entangled state p compatible 
with data r}Q,r]\,pA, i.e. the EVM x{p) is a solution to a 

problem as specified in Observation 3. Then there exists 
a separable state p which is also compatible with the data, 
i.e. whose EVM is also a solution to the same problem. 

Proof: Since p is PPT, p^^ is a valid physical state, 
too. From the construction of the EVM (7) it can be seen 
immediately that the EVM of p-^-* equals X^^{p), i.e., the 
partial transpose of the EVM x of p. Furthermore, we 
have x^'* = X^- So for 



P:= ^{P + P^^) 
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its EVM X = {x + X^^)l^ = (x + x'^)/2 is a solution 
to the problem specified by the data as shown in the 
proof of Lemma 1. Since p = p"^-* and (SivcvM\ =^ 2, p 
is separable (Theorem 2 in [23]). So the PPT-entangled 
state p and the separable state p are both compatible 
with the available data. □ 



B. Implementation with semi-deflnite 
programming 

It is hard to find analytically a set of parameters 
a,b,c,d,e to a given matrix x (18) with Pa, Vo^Vi fixed 
so that Ineqs.(17) are indeed fulfilled. However, this task 
can be easily impknucnitcxl and efficiently solved with 
semi-definite programming [24]. 

A semidefinite program is a convex optimization prob- 
lem of the type 

minc'^a; (19) 

X 
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FIG. 2: Entanglement detection with semi-definite program- 
ming. For each value of transmission, the area below the 
corresponding line belongs to parameter pairs outcome over- 
lap vs. quadrature variance for which entanglement can be 
ensured. 



subject to 



N 



(20) 



Here, x e R^, c e R^, and the Fq, Fk, k = 1 . . . N are 
Hcrmitean matrices. The matrix inequality (20) defines 
a convex subset in the vector space M,^ . 

Optimization problems of this type have several nice 
properties [24] . For usual minimization problems it is im- 
possible to guarantee that an obtained solution is really 
the global minimum. This is not the case for semidefinite 
programs, since here the so-called dual problem delivers 
a lower bound on the minimum. Under weak conditions, 
this lower bound coincides with the minimum, thus global 
optimality of a solution may be proved. Furthermore, ef- 
ficient algorithms for the implementation of semidefinite 
programs are freely available [25-27]. 

To implement the constraints in Observation 3, the 
question of interest is whether or not there exists a so- 
lution of the form (18) to given data matrices p^, 770,771 
which satisfies the two inequalities (17). In the language 
of semidefinite programming it is only of interest whether 
the constraints in (20) can be fulfilled. This is a so-called 
feasibility problem, where the objective function (19) can 
be ignored. 

The data matrices pA,Vo, Vi are included in Fq as well 
as ±{i/2)pA®J^ while the free real parameters a, 6, c, d, e 
form the vector x G R''. The specific form (18) of x 
then determines the shape of the real symmetric matrices 
Fk, fc = 1 . . . 5. If the problem is returned infeasible, then 
the bipartite state must have been entangled. 

In order to illustrate our method, let us choose coher- 
ent states I ± a) as input states. Then, we set the a 
priori probabilities po,pi both to 1/2 thus S = (pa)oi 
in Eq. (18) becomes exp(— 2|q;|^)/2. Now, let us assume 



measurement outcomes of po/i at Bob's site generating 
EVMs 



%/i 



1 ±c 
±c c2 -1-0-2 




V 



(21) 



The 



with symmetric quadrature variances cr^ 
quadrature expectation values are set to (a;)o/i = ±c and 
(?y)o/i = 0. We also assume vanishing expectation values 
for S{xy). Note that this property does not necessarily 
mean that the outcome states po,Pi are Gaussian. The 
performance is shown in Fig. 2 for several transmission 
values Tj := /\a\^. 

All lines show a similar behavior: For an input over- 
lap {—a\a) close to zero, the outcome states are quite 
distinguishable, too. In this case, the outcomes must be 
extremely pure in order to show entanglement. The more 
the input states are overlapping, the more noise can be 
tolerated for a certain amount of loss. 

For an overlap of 1 (i.e., a = 0), however, the input 
states factorize off from Alice's logical qubits, so they are 
no longer entangled. Thus, in the limit of the overlap go- 
ing to 1, the graph drops down to cr^ = 1 discontinuously. 

It has to be emphasized that even for 90% loss, the abil- 
ity of detecting entanglement is still well within a reason- 
able tolerance of noise, achievable in current experiments. 
Also, for all transmission values r], the necessary relation 
between transmission and excess noise 5 := — 1, given 
hy 5 <2r] [28], is satisfied. 



C. Generalizations 

So far we considered a scheme where we send two co- 
herent states and perform a heterodyne measurement to 
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extract information about the covariance matrix and the 
expectation values of two quadrature operators. Any 
quantum mechanical measurement which allows us to in- 
fer these observable quantities will suffice to proof the 
presence of entanglement with our method. 

One can also consider a situation where only {x^) and 
(y^) are measured but not S{xy). This is the case when 
Bob measures only two conjugate quadratures by homo- 
dyne measurements. This leads to an additional free pa- 
rameter / that replaces S{xy) = in Eqn.(21). By nu- 
merical evaluation we found that the parameter regime, 
shown to be incompatible with separable states by our 
approach, is exactly the same as if we had measured 
S{xy) = 0. 

Note that our analysis does not make use of the ex- 
plicit form of the signal states. Instead of coherent states 
one could have used any two quantum mechanical states. 
Only the overlap between the two states is relevant and 
enters the analysis. 

V. CONCLUSIONS 

In conclusion, we have investigated separability prop- 
erties of quantum states consisting of a qubit and a mode. 



We introduced the EVM matrix as a suitable descrip- 
tion of such systems and derived a necessary separability 
criterion in this formulation. For reduced information, 
this separability criterion can be efficiently checked via 
semidefinite programming. We have then applied these 
results to a general PM QKD protocol using coherent sig- 
nal states and heterodyne detection. Also an extension 
to homodyne measurement of two conjugated variables 
only has been given. We showed that PPT entanglement 
cannot be detected in this scheme. For realistic setups, 
however, we calculated that entanglement detection is 
possible even in the case of high transmission losses. 
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